CVE-2026-74884
HighCVSS 7.5Summary
openssl_encrypt before version 1.4.0 contains a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory.
Risk Assessment
The risk includes unauthorized access to files and directories on the system, potentially leading to disclosure of sensitive data or further system compromise.
Recommendation
It is recommended to immediately upgrade openssl_encrypt to version 1.4.0 or later, which includes a fix for the path traversal vulnerability.
Original NVD description (English source)
openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory.